Minimum SSL/TLS versions can also be configured individually for the following settings, not all of which support TLSv1.3: A minimum (ssl-min-proto-ver) and a maximum (ssl-max-proto-ver) version can be configured for SSL VPN. edit "ldap name". -Also, check the following key. nmaps ssl-enum-ciphers script will not only check SSL / TLS version support for all versions (TLS 1.0, TLS 1.1, and TLS 1.2) in one go, but will also check cipher support for each version including giving providing a grade. When I run the show command again, there is nothing in the configuration file showing the changes and nothing about the TLS version. Command prompt to check TLS version required by a host Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. set ssl-min How to test which version of TLS my .NET client is using? rev2023.5.1.43405. The FortiGate will try to negotiate a connection using the configured version or higher. These version-specific subkeys can be created under the following registry path: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols. I like to use curl which can report a TLS version negotiation quite nicely. 'set ssl-min-proto-version ' option is for minimum supported protocol version for SSL/TLS connections. If the LDAP server offers weaker version than the one enabled, then FortiGate will deny the connection and it is possible to see below similar debug lines. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client\Enabled SSL/TLS load balancing Fortinet GURU Check the SSL VPN port.